[ubuntu/focal-proposed] libssh 0.9.3-2ubuntu2 (Accepted)

[Marc Deslauriers]

libssh (0.9.3-2ubuntu2) focal; urgency=medium

  * SECURITY UPDATE: denial of service via AES-CTR ciphers
    - debian/patches/CVE-2020-1730.patch: fix a possible segfault when
      zeroing AES-CTR key in src/libcrypto.c.
    - CVE-2020-1730

Date: Thu, 09 Apr 2020 09:17:51 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libssh/0.9.3-2ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 09 Apr 2020 09:17:51 -0400
Source: libssh
Architecture: source
Version: 0.9.3-2ubuntu2
Distribution: focal
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 libssh (0.9.3-2ubuntu2) focal; urgency=medium
 .
   * SECURITY UPDATE: denial of service via AES-CTR ciphers
     - debian/patches/CVE-2020-1730.patch: fix a possible segfault when
       zeroing AES-CTR key in src/libcrypto.c.
     - CVE-2020-1730
Checksums-Sha1:
 0d9b831a960bcb12efbdee7f2429a1731f6c16b7 2530 libssh_0.9.3-2ubuntu2.dsc
 dd00a14c2c80c6e112c94af3c6aeeea9d39dd725 27384 libssh_0.9.3-2ubuntu2.debian.tar.xz
 e9a24ea4a048f8978fca196a11af22cad86be380 8469 libssh_0.9.3-2ubuntu2_source.buildinfo
Checksums-Sha256:
 03b2da1cf8dd2899a3546966a37883bb06ed687a7a3532f544797dedee75416a 2530 libssh_0.9.3-2ubuntu2.dsc
 d7ebc68a64f7cada270b383bcea522c51f5361df12573b0f3c754e41ed0d060d 27384 libssh_0.9.3-2ubuntu2.debian.tar.xz
 d3b8e8740c4dcb74225054019f95f686e024948e5d5457405f42076a3778e9d5 8469 libssh_0.9.3-2ubuntu2_source.buildinfo
Files:
 58700fcc8a3437fb93f8f68c5cfcea81 2530 libs optional libssh_0.9.3-2ubuntu2.dsc
 5cf467981bdc59d2067936fe01ca6fd5 27384 libs optional libssh_0.9.3-2ubuntu2.debian.tar.xz
 bdb1b739d5bd5c6d6c60fa12852481d8 8469 libs optional libssh_0.9.3-2ubuntu2_source.buildinfo
Original-Maintainer: Laurent Bigonville <bigon at debian.org>